CVE-2006-2354 describes a username enumeration vulnerability in Ipswitch WhatsUp Professional 2006 and 2006 Premium. The NmConsole/Login.asp component generates distinct error messages, allowing unauthenticated remote attackers to determine valid usernames. With a CVSS score of 5.0, this low-complexity vulnerability primarily impacts confidentiality by exposing user accounts. There is no known public exploit code, Metasploit module, or significant community discussion, indicating a low exploitation status.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
2006CPE matchmatch criteria | cpe:2.3:a:ipswitch:whatsup_professional:2006:*:*:*:*:*:*:* | ||
2006_premiumCPE matchmatch criteria | cpe:2.3:a:ipswitch:whatsup_professional:2006_premium:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.